medium5.0Public exploit code
CVE-2005-0780
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) fil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PAFileDB 3.1 - Error Message Full Path Disclosure2004-12-04 · webapps · php · Verified
Impact
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php Arena | Pafiledb | Versions 1.1.3, 2.1.1, 3.0, 3.0_beta_3.1, 3.1 |